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AMENDMENTS TO THE CLAIMS 



1. (Currently amended) : A method of on-line 
authentication, comprising the steps of: 

receiving through a computer network a communication 
indicating that authentication is needed; 

obtaining a first number that indicates how many- 
fingerprints will be requested for authentication; 

randomly selecting which fingerprints will be 
requested by using a fingerprint numbering scheme designated 
by a user .* 

sending through the computer network one or more 
requests for entry of the randomly selected fingerprints; 

receiving fingerprint data through the computer 
network in response to the one or more requests for entry of 
the randomly selected fingerprints; and 

comparing the received fingerprint data to 
fingerprint data stored in a database. 

2. (Original) : A method in accordance with claim 1, 
wherein the step of obtaining a first number comprises the 
step of: 

randomly selecting the first number. 

3. (Original) : A method in accordance with claim 1, 
wherein the step of obtaining a first number comprises the 
step of: 

retrieving the first number from the database. 

4. (Original) : A method in accordance with claim 1, 
wherein the first number is equal to or less than a total 
number of fingerprints stored in the database for a particular 
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user . 



5. (Original) : A method in accordance with claim 1, 
wherein the step of randomly selecting which fingerprints will 
be requested comprises the step of: 

randomly selecting fingerprints from a total number 
of fingerprints stored in the database for a particular user. 

6. (Original) : A method in accordance with claim 1, 
further comprising the step of : 

detecting through the computer network whether a 
client computer has a fingerprint reader. 

7. (Original) : A method in accordance with claim 1, 
\ further comprising the steps of: 

receiving set-up data for a particular user through 
the computer network; and 

storing the received set-up data in the database. 

8. (Original) : A method of setting up on-line 
authentication, comprising the steps of: 

sending through the computer network a request for a 
total number that indicates how many fingerprints to hold for 
aut hent i cat ion ; 

receiving through the computer network the requested 
total number; 

sending through the computer network one or more 
requests for entry of fingerprints; 

receiving fingerprint data through the computer 
network in response to the one or more requests for entry of 
f ingerprint s ; 

assigning a number to each entered fingerprint that 
Page 3 of 12 



PACE 6/15 " RCVD AT 313/2 004 2:55:51 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-1/1 - DNIS: 8729306 " CSID: 8585520095 " DURATION (mm-ss>:04-28 



03/03/04 11:57 FAX 858551V95 



007 



Application No.: 09/575,410 
Amendment 

is consistent with a number- intended by a user who entered the 
fingerprints; and 

storing the received fingerprint data and assigned 
numbers in a database . 

9. (Original) : A method in accordance with claim 8, 
further comprising the step of: 



first number that indicates how many fingerprints will be 
requested for each authentication. 

10. (Original): A method in accordance with claim 8, 
further comprising the step of: 



number that indicates how many fingerprints are to be 
requested for each authentication, wherein the first number is 
greater than or equal to zero and less than or equal to the 
total number. 

11, (Original) : A method in accordance with claim 8, 
further comprising the step of: 

receiving through the computer network an indication 
that a number is to be randomly selected to indicate how many 
fingerprints will be requested for each authentication. 

12. (Original) : A method in accordance with claim 8, 
further comprising the step of: 



whether username and password authentication should be enabled 
for client computers not having a fingerprint reader. 

13. (Original) : A method in accordance with claim 8, 



sending through the computer network a request for a 




receiving through the computer network a first 



sending through the computer network a request for 
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further comprising the step of: 

receiving through the computer network an indication 
that usemame and password authentication should be enabled 
for client computers not having a fingerprint reader. 

14. (Currently amended) : A system for providing on-line 
authentication, comprising: 

a database configured to store fingerprint data and 
user set-up data; 

a communication device configured to provide a 
connection to a computer network; and 

a processor and a memory configured to receive 
through the computer network a communication indicating that 
authentication is needed, obtain a first number that indicates 
how many fingerprints will be requested for authentication, 
randomly select which fingerprints will be requested by using 
a fingerprint numbering scheme designated by a user , send 
through the computer network one or more requests for entry of 
the randomly selected fingerprints, receive fingerprint data 
through the computer network in response to the one or more 
requests for entry of the randomly selected fingerprints, and 
compare the received fingerprint data to fingerprint data 
stored in the database. 

15. (Original) : A system in accordance with claim 14, 
wherein the processor and the memory are further configured to 
obtain the first number by randomly selecting the first 
number. 

16. (Original): A system in accordance with claim 14, 
wherein the processor and the memory are further configured to 
obtain the first number by retrieving the first number from 
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the database. 

17. (Original) : A system in accordance with claim 14, 
wherein the first number is equal to or less than a total 
number of fingerprints stored in the database for a particular 
user. 



18. (Original) : A system in accordance with claim 14, 
wherein the processor and the memory are further configured to 
receive set-up data for a particular user through the computer 
network and store the set-up data in the database. 



19. (Original) : A system in accordance with claim 14, 
wherein the processor and the memory are further configured to 
send through the computer network a request for a total number 
that indicates how many fingerprints to hold for 
authentication. 



20. (Original): A system in accordance with claim 14, 
wherein the processor and the memory are further configured to 
receive fingerprint data through the computer network in 
response to one or more requests for entry of f ingerprints . 

21. (Currently amended) : A system in accordance with 
claim 20, wherein the processor and the memory are further 
configured to assign a number to each entered fingerprint that 
is consistent with the fingerprint numbering scheme designated 
by the user a number inL end e d by a us er who entered the 
fingerprints, and store the received fingerprint data and 
assigned numbers in the database. 
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22. (New) : A method in accordance with claim 1, wherein 
the fingerprint data stored in the database comprises more 
than ten fingerprints stored for the user. 



23, (New): A method in accordance with claim 8, wherein 
the requested total number is greater than ten. 

24, (New): A system in accordance with claim 14, wherein 
the fingerprint data stored in the database comprises more 
than ten fingerprints stored for the user. 
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